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An efficient implementation of many multiparty protocols for quantum networks requires that 
all the nodes in the network share a common reference frame. Establishing such a reference frame 
from scratch is especially challenging in an asynchronous network where network links might have 
arbitrary delays and the nodes do not share synchronised clocks. In this work, we study the problem 
of establishing a common reference frame in an asynchronous network of n nodes of which at most 
t are affected by arbitrary unknown error, and the identities of the faulty nodes are not known. We 
present a protocol that allows all the correctly functioning nodes to agree on a common reference 
frame as long as the network graph is complete and not more than t < n/4 nodes are faulty. As the 
protocol is asynchronous, it can be used with some assumptions to synchronise clocks over a network. 
Also, the protocol has the appealing property that it allows any existing two-node asynchronous 
protocol for reference frame agreement to be lifted to a robust protocol for an asynchronous quantum 
network. 

PACS numbers: 03.67.-a, 03.67.Hk, 03.67.Dd 


I. INTRODUCTION 

To use quantum cryptography on a global scale one 
must first have a functioning quantum internet [lj. Re¬ 
cently this necessity has inspired a lot of effort in the 
research and development of satellite M, and ground 
based m quantum networks. The possible applications 
of such networks are not restricted to only cryptography. 
A fully general quantum network will allow us to perform 
general distributed quantum computing [loi - [T^ |. 

In this work, we study problems related to initialisation 
and construction of quantum networks. More specifically, 
we study how well n nodes in an asynchronous quantum 
network can agree on a reference frame in the presence 
of at most t arbitrarily faulty nodes among them. By 
asynchronous network we mean that in this setting we 
do not require the nodes to share a clock to begin with, 
and the channel delays might vary arbitrarily in each 
use. In fact, an asynchronous protocol only assumes any 
message sent from a correct node to a correct node will 
eventually reach the destination, without imposing any 
bound on the channel delay. This assumption captures 
the most general reference frame agreement problem in a 
quantum network because during the initialisation of the 
network the pairwise channel delays might be unknown, 
clocks might not be synchronised and spatial reference 
frames might be unaligned. 

In a quantum channel, the qubits are encoded in some 
physical degree of freedom. For example, polarisation 
direction of photon is often used to encode qubits. This 
requires the sender and receiver to agree on some set of 
orthonormal directions as their common spatial reference 
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frame. Another example is the time-bill qubits, where 
both of the parties require synchronised clocks. That is, 
they must have a pre-agreed temporal reference frame. 

So far these reference frame a gre ement problems are 
studied in a bipartite setting 13 -Il9f with the exception 
of Hill where spatial direction are agreed on in a syn¬ 
chronised network of n nodes. More specifically in [20} 
it is assumed that the network is synchronous. That is, 
all the nodes of the network have a shared clock and all 
the link delays have known upper bound. The bipartite 
reference fram e ag reement problem have been studied ex¬ 
tensively (see 1211 for a review). However, agreeing on a 
reference frame in an asynchronous network of n nodes 
remained open. 

There are protocols that allow Bell inequality tests and 
quantum information exchange between nodes without 
a pre-shared reference frame (See, for example [22l-l24j. 
However, the ability to reliably share reference frames 
among multiple nodes gives significant technological ad¬ 
vantages by simplifying the implementation of most pro¬ 
tocols. Moreover, reference frame agreement protocols 
have important implications in fields that are not directly 
related to quantum information. 

One advantage of having an asynchronous reference 
frame agreement protocol for a network with certain num¬ 
ber of faulty nodes is that once a spatial reference frame 
is established, then new robust protocols can potentially 
be built on top of it to perform network-wide clock syn¬ 
chronisation. This is a task important by itself with var¬ 
ious applications in security, navigation and finance [25| . 
The primary difficulty of executing any protocol in an 
asynchronous network comes from the fact that in the 
presence of incorrect, that is, arbitrarily faulty nodes it 
is impossible to decide for a correct receiver whether a 
message is not arriving because the sender is faulty and 
not sending anything at all, or the sender is correct but 
the channel is taking a very long time to transfer the 
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message. Therefore, it is nontrivial to decide how long to 
wait for a message before moving on to the next step of 
a protocol. 

Another difficulty is that unlike in classical informa¬ 
tion theory where information can be represented in bits, 
a reference frame can only be transferred from scratch by 
exchanging systems which have an inherent sense of direc¬ 
tion [26[. Examples of such systems are spin qubits and 
photon polarisation qubits. The receiver can extract di¬ 
rection information from these systems, for example, by 
performing tomography on them. While preparing the 
direction any node Pj will know the description of the 
direction as a vector 77 in its local frame. Once the quan¬ 
tum system carrying that direction arrives at a receiver 
Pj , the receiver constructs a representation of the direc¬ 
tion in it’s own local frame as Vj. Such an estimation 
procedure inevitably introduces some error even in cor¬ 
rect transmissions. That is, depending on the precision of 
the instruments one can only expect to have d(vi, Vj) <6 
for some S > 0, where d{i>i,Vj) is the Euclidian distance 
between 77 and Vj. However, this distance metric does 
not make sense as it is, because 77 and Vj are vector rep¬ 
resentations in two different local frames. So we must 
redefine our distance metric d (.,.) where distance is com¬ 
puted by converting both vectors in the frame of the first 
argument. As a result d(vi,Vj ) remains a valid distance 
measure even though Pi and Pj do not know each other’s 
local frame. This computation of distance between two 
vectors of different reference frames is only done in the 
analysis of the protocol and not by the nodes while play¬ 
ing the protocol. Any distance computed by a node inside 
a protocol is only between vectors for which it has a rep¬ 
resentation in its local frame. This inherent imperfection 
of message transmission must be accounted for by any 
reference frame agreement protocol. We capture this in 
the definition as, 

Definition 1. For 77 > 0, a protocol in an asynchronous 
network of n nodes is an 77 -asynchronous reference frame 
agreement protocol if it satisfies the following conditions. 

Termination. Every correct node Pj eventually termi¬ 
nates and outputs a direction 77 . 

Correctness. If correct node Pj outputs 77 and correct 
node Pj outputs Vj then d(vi,Vj) < 77 . 

However, we have to achieve these termination and cor¬ 
rectness condition in the presence of incorrect or faulty 
nodes. As it is unknown which nodes are faulty this 
resembles the Byzantine fault tolerance model [27| stud¬ 
ied in classical distributed computing. For quantum net¬ 
works our assumptions are, 

• The pairwise channels are public. That is, the mes¬ 
sages are not secret. As a result, an adversary can 
see the content of a message between two correct 
nodes and adapt its strategy accordingly. 

• The pairwise channels are authenticated. That is, 
if a correct node sends a message to another cor¬ 
rect node the message cannot be altered by any 


adversary. However, there might be channel noises, 
which can be dealt with, as in [ 2 (| ■ 

• The pairwise channel delays might be controlled by 
the faulty nodes. That is, the faulty nodes can con¬ 
trol the channel delays, even the delays for message 
passing between any pair of correct nodes. 

• If a correct node sends a message to another correct 
node, then the message eventually reaches the re¬ 
ceiver. That is, even though the delay is controlled 
by some adversaries they cannot put infinite delay 
on the message between two correct nodes. How¬ 
ever, the delay can be arbitrarily large. 

• The faulty nodes might have correlated error. To 
create a protocol which tolerates the worst kind of 
faults, we also assume that the faulty nodes can co¬ 
operate with each other and have a global strategy 
to thwart the protocol. This is a realistic assump¬ 
tion because some nodes in a region might show 
correlated error which affects a part of the network. 

Under all these assumptions we give an rj-asynchronous 
reference frame agreement protocol for a network of n 
nodes that can tolerate up to t < n/4 faulty nodes. We 
review some preliminaries before presenting the main re¬ 
sults. 


II. PRELIMINARIES 

The problem of reference frame agreement over an 
asynchronous quantum network is necessarily multidis¬ 
ciplinary in nature. That is, it combines various con¬ 
cepts from quantum physics, information theory, cryp¬ 
tography and distributed computing. In this section we 
introduce several concepts from these fields that will be 
useful throughout this work. 


A. Reference frame 

1. Spatial reference frame 

A spatial reference frame defines a co-ordinate system 
in space. For example in a Cartesian coordinate system, 
once the Cartesian frame (x, y, z) is specified any vector 
v = ax + ply + 'yz can be represented as (a, pi, 7 ) where 
a , pi and 7 are scalers. For two distant parties, who only 
have the knowledge of their own local frame, it becomes 
necessary to establish a shared reference frame before 
they can successfully communicate spatial information 
(such as, location and orientation). 

We use quantum communications to send a direction 
between a sender and a receiver. Any protocol that al¬ 
lows transmission of direction between two nodes with S 
accuracy is called a 2-party 5-estimate direction protocol. 
As an example we refer to the Protocol [TJ 2ED, one of 
the simplest possible protocols as studied in [13j]- Here 
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a sender creates many identical qubits with their Bloch 
vector pointing to the intended direction and the receiver 
measures them with Pauli measurements. From the 
statistics of the measurement outcomes, the receiver then 
estimates the Bloch vector’s direction within Euclidian 
distance 8 with probability of success q succ > 1 — e~ a ( * * * 4 5 6 7 8 9 
where m is the number of qubits exchanged. That is, the 
Protocol 2ED allows the sender to transmit a direction u 
which is received as the direction v at the receiver, such 
that the inequality d(u, v) < 8 holds with probability 
Qsucc > 1 — e~ n ^ m ). We emphasise that, this work al¬ 
lows us to lift any two party (5-estimate direction protocol 
into a protocol for a quantum network of n nodes. 


_ Protocol 1: 2ED 

input : Sender, direction u 
output : Receiver, direction v 
Sender: 2ED-Send 

Prepare 3n qubits with direction u 
Send them to the receiver 


4 Receiver: 2ED-Receive 

5 Receive 3n qubits from the sender 

6 Measure n qubits with a x and compute p x , the 
frequency of getting outcome +1 

7 Similarly on the remaining qubits, compute p y and 
p z with measurements a y and a z on n qubits each 

8 Assign x -f— 2 p x — 1, y «— 2 p y - 1, z «— 2 p z - 1; 
Assign l <— \Jx 2 + y 2 + z 2 

9 Output v «— (x/l, y/l, z/l) 


2. Temporal reference frame 

Similar to spatial reference frames multiple parties 
might need to synchronise their clock rates and time dif¬ 
ferences. Once they have established it, we say that they 
share a temporal reference frame and they are synchro¬ 
nised in time. Any multiparty protocol or computation 
performed by systems that do not share a temporal refer¬ 
ence frame are respectively called asynchronous protocol 
or asynchronous computation. 


B. Asynchronous communication 

In an asynchronous network we assume that the nodes 
do not share any synchronised clock. And the communi¬ 
cation channel between each pair is such that a message 
takes an arbitrary amount of time to propagate through 
it. Here the only guarantee is, if a message is transmit¬ 
ted from a correct node the message will eventually reach 
to the receiver. Also, a node might take an arbitrary 
amount of time to perform the next step in a protocol. 
In this setup, to analyse the time complexity of an asyn¬ 
chronous protocol we only count the maximum number of 
steps executed by any node before the protocol completes, 


and call it the running time of the protocol. The perfor¬ 
mance, in terms of execution time, of an asynchronous 
agreement protocol is determined by its expected running 
time. The expectation is thereby taken over all possible 
random inputs of the nodes, random bits used by the 
nodes, as well as all possible random behaviour of the 
faulty nodes. The exact probability distributions may 
not be known, but the goal is to show that the expected 
running time is low for all possible distributions. 


1. The asynchronous message 

In the absence of a synchronised clock, each message 
must have a ‘begin’ and ‘end’ tag. Also, depending on the 
particular application, a message might carry a [type] tag. 
In our problem we don’t have a shared reference frame. 
For this reason, we cannot use the quantum channel to 
carry these [type] tags. This requires us to have a par¬ 
allel classical channel that uses some classical degree of 
freedom to carry bits. 

We assume that each pair of nodes are connected by an 
asynchronous public authenticated CQ-channel (classical 
quantum channel), which can send a message using both 
classical and quantum degrees of freedom in the absence 
of a shared reference frame. An example of such com¬ 
bined message is shown in Table |T] where each quantum 
message m q is sandwiched between a classical ‘begin’ and 
an ‘end’ tag and also accompanied by a classical type tag 
m c . The symbol _L denotes quantum signals that can be 
ignored. 


TABLE I: Channel primitive: A message 
Step Classical Quantum 

1 begin _L 

2 m c m q 

3 end _L 


The only assumption is the nodes can match the clas¬ 
sical and quantum parts of the message. 


2. Asynchronous interactive consistency 

Our protocol uses the solution to the following inter¬ 
active consistency problem which was first proposed by 
Pease, Shostak and Lamport [28j . 

Definition 2 (The Interactive Consistency Problem). 
Consider a complete network of n nodes in which com¬ 
munication lines are private. Among the n nodes up to 
t might be faulty. Let Pi, P 2 ,..., P n denote the nodes. 
Suppose that each node P* has some private value of in¬ 
formation Vi £ |V| > 2. The question is whether it is 
possible to devise a protocol that, given n, t > 0, will al¬ 
low each correct node to compute a vector of values with 
an element for each of the n processors, such that: 
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1 . All the correct nodes compute exactly the same vec¬ 
tor; 

2. The element of this vector corresponding to a given 
correct node is the private value of that node. 

For an asynchronous network, Ben-Or and El- 
Yaniv [29j gives a protocol Asynchronous-1C which solves 
this problem for t < n/3 in constant expected time. We 
use this protocol as a subroutine. 

Not that the Asynchronous-IC requires private asyn¬ 
chronous classical channels. Whereas, we only require 
public authenticated classical and quantum channels be¬ 
tween each pair of nodes in the network. The reason is, 
with authenticated public quantum channels each pair of 
nodes can play 2ED type protocol and establish a bipar¬ 
tite reference frame. Once the bipartite reference frame 
is established between each pair using the public authen¬ 
ticated classical and quantum channels they can perform 
QKD which gives them a private classical channel. So, 
they can play Asynchronous-IC at a later stage of the pro¬ 
tocol. We emphasise that, even thought by playing pair¬ 
wise 2ED each honest pair of nodes can share a reference 
frame between them the goal of this paper is to have a 
global shared reference frame which is non-trivial in the 
presence of faulty nodes. 

III. RESULTS 

In this paper we give a protocol that can take any two- 
party reference frame agreement protocol and lift it up 
to a fault tolerant multiparty reference frame agreement 
protocol. More specifically, we present the first protocol 
A-Agree which allows n nodes in a fully connected asyn¬ 
chronous quantum network to agree on a reference frame 
in the presence of t < n/4 faulty nodes. The result can 
be summarised in the following theorem. 

Theorem 1 . In a complete network of n nodes that are 
pairwise connected by public authenticated quantum and 
classical channels, if a bipartite 5-estimate direction pro¬ 
tocol that uses m qubits to achieve success probability 
Qsucc > 1 — e _n ( m<5 - 1 is used, then protocol A-Agree is 
a 425-asynchronous reference frame agreement protocol 
with success probability at least 1 — -i°g «) j ih a i 

can tolerate up to t < n/4 faulty nodes. 

Note that, here we use the fl notation. Therefore, the 
bounds on success probability asymptotically holds for 
large enough m. This is not a drawback because, for ex¬ 
ample, where photon polarisation is used to carry direc¬ 
tional information, the pulses of polarised light created 
by the source would contain large number of photons and 
allow the protocol to achieve high success probability for 
a network of an arbitrary size. 

The problem of both synchronous and asynchronous 
agreement on classical bits in the presence of arbitrarily 
faulty node is extensively studied in classical literature as 


Byzantine agreement problem (27t |. However, we empha¬ 
sise that a classical protocol cannot be used in our prob¬ 
lem because firstly, unlike classical network, any commu¬ 
nication of direction among correct nodes in a quantum 
network will have inherent noises. As a result any clas¬ 
sical protocol would see all the correct nodes as faulty 
nodes and the protocol will fail. Secondly, one cannot use 
the classical protocol directly because one cannot repre¬ 
sent a reference frame using only classical bits [26!] . How¬ 
ever, classical literature can still inform us on important 
questions such as, how to achieve constant expected time, 
how to handle asynchronicity. Some of the approaches 
of our protocol regarding these questions are influenced 
by [30J. We also use the interactive consistency protocol 
by Ben-Or et al. [29j as a subroutine. 

Before giving the protocols we first need to define some 
notation. 

Wi [j] represents a vector received by node Pi from node 
Pj using the bipartite direction estimation protocol. This 
vector is represented with respects to Pi ’s local reference 
frame. 

In our protocol sending (type, v) to some node means 
the sender uses a 5-estimate direction protocol to send 
the direction v to the receiver. The sender also sends the 
classical tag [type] associated to this direction. The re¬ 
ceiver will receive an approximation of the sent direction 
as v' where d(v,v') < 5. Our protocol uses four different 
tags as types. They are, init, echo, readyi and ready 2 - 

Next, we fix a notation for a cluster of vectors of certain 
types where the cluster has a certain cluster centre, which 
is the average of the vectors, and a cluster parameter. We 
write it as Cf ([types], w c ). This means the cluster with 
cluster centre w c is computed and stored by node Pi, 
has a cluster parameter <5 and contains only the vectors 
with associated tags in [types]. Here, [types] is a comma 
separated list of [type]s. The cluster parameter 5 denotes 
that for all u, v G Cf ([types], w c ) the distance d(u, v ) < 5. 

For example, Cf ([readyi,ready 2 ], v c ) denotes a cluster 
in which each vector has tags readyi or ready 2 with clus¬ 
ter centre v c such that Vu, v G Cf([readyi,ready 2 ], v c ), 
and d(u, v) < 5. 

P(C- ([type], w c )) is the set of all the nodes Pj such 
that, Wi[j) G Cf ([type], w c )- That is, it is the set of node 
id’s from which Pi have received the vectors in the cluster 
cf([type],w c ). 

Now we give our protocol in two steps. First, we give 
a protocol for asynchronous broadcast, which allows any 
sender to securely send a direction to all the other nodes. 
However, if the sender is faulty the protocol might never 
terminate. Using this as a primitive we later give our 
asynchronous agreement protocol. 


A. Asynchronous broadcast 

As the name suggests using this protocol a sender node 
can send some message to all the other nodes in an asyn¬ 
chronous network. At first sight a naive protocol of just 
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sending the message to all other nodes one by one seems 
to be a valid protocol. However, this naive protocol does 
not work if the sender intentionally sends different mes¬ 
sage to different nodes, which can easily happen in net¬ 
works with faulty nodes. To guard from it, all the other 
nodes must communicate between each other to make 
sure they are receiving the same message, or a close ap¬ 
proximation to it. However, as we have at most t faulty 
nodes, this verification also becomes tricky. The whole 
thing becomes more challenging because the network is 
not synchronous. As a result a receiver who is waiting 
for a message, cannot be certain whether to keep waiting 
(because the message might be taking a long time in the 
channel) or move on (the sending node might be faulty 
and not sending the message at all). Our protocol takes 
care of all these challenges. 

Formally the protocol is defined as, 


Definition 3 . For 77 > 0 , £ > 0 , a protocol which is initi¬ 
ated by a sender node P a , in an asynchronous network of 
n nodes, is called a (77, £))- asynchronous reference frame 
broadcast protocol if it satisfies the following conditions. 

Termination. 

1. If the sender is correct then every correct node 
eventually completes the protocol. 

2. If any correct node completes the protocol, 
then all the correct nodes eventually complete 
the protocol. 

Consistency. If one correct node Pk outputs a direction 
Vk then all pairs of correct nodes Pi and Pj eventu¬ 
ally output directions Vi, Vj where d(vi,Vj) < 77. 

Correctness. If P s is correct and broadcasts a direc¬ 
tion u and if a correct node Pj outputs 1 then 
d(u, Vi) < (. 

We emphasize that the Termination condition of asyn¬ 
chronous reference frame broadcast is much weaker 
than the Termination condition of asynchronous refer¬ 
ence frame agreement because in the broadcast proto¬ 
col we do not require that the correct nodes complete the 
protocol if the sender is faulty. Also, in an agreement 
protocol there is no designated sender node, whereas the 
broadcast protocol has a sender node. 

We achieve asynchronous broadcast by our protocol 
AR-Cast. The following theorem summarises its proper¬ 
ties. 

Theorem 2 . In a complete network of n nodes that are 
pairwise connected by public authenticated classical and 
quantum channels, if a bipartite S-estimate direction pro¬ 
tocol that uses m qubits to achieve success probability 
dsucc > 1 — e~ n ^ mS ) is used, then protocol AR-Cast is 
a (42<5,145) -asynchronous reference frame broadcast pro¬ 
tocol, with success probability at least 1 — e ~ n ( m5 _1 °g") 
that can tolerate up to t < n/4 faulty nodes. 


_ Protocol 2: AR-Cast 

input : Sender inputs direction u 
output : Vi Pi outputs direction Vi 

1 Epoch 0: (Only Sender) 

2 |_ Send-to-all (init, u). 


1 

2 

3 

4 

5 


Epoch 1: (Player Pi) 

Listen to init, echo, readyi and ready 2 type messages. 
Wait until Either received one (init, Ui) Then 

Send-to-all (echo, up. 

Goto Epoch 2. 


6 


7 

8 


Or until received a cluster of directions 
Cf s ([echo],w c ) of size at least (n — 2 1) And a 
cluster of directions C} 06 ([readyi,readyi],v c ) of size 
at least (t. + 1), so that, d(w c ,v c ) < 105 Then 
Send-to-all (ready 2 , w c ). 

Goto Epoch 3. 


1 

2 

3 

4 

5 


Epoch 2: (Player Pi) 

Listen to echo, readyi and ready 2 type messages. 
Wait until Either there exists a cluster of directions 
Cf s ([echo], w c ) of size at least (n — t) Then 
Send-to-all (readyi, w c ). 

Goto Epoch 3. 


6 


7 

8 


Or until there exists a cluster of directions 
Cf s ([echo], w c ) of size at least (n — 2 1) And a 
cluster of directions C] 06 ([readyi,readyi], v c ) of size 
at least (t. + 1), so that, d(w c ,v c ) < 105, Then 
Send-to-all (ready 2 , w c ). 

Goto Epoch 3. 


1 

2 

3 

4 


Epoch 3: (Player Pi) 

Wait until there exists a cluster of directions 
C] 05 ([readyi,readyi], v c ) of size at least (n — t) Then 
Output v c . 

Halt 


The protocol [2] AR-Cast works roughly as follows. In 
Epoch 0 the sender sends its intended direction to all as 
a [init] type message. In Epoch 1 all the nodes wait until 
they receive an [init] from sender or sufficient number of 
confirmations from other nodes that they have received 
some directions and proceed to the next epoch. This 
way, even if some correct node never receives an [init] 
message, if the other correct nodes are advancing through 
the protocol, then this node in Epoch 1 will not stay 
behind waiting. In Epoch 2 the correct nodes, which 
have decided upon a direction, notify the other nodes 
about their decision by sending readyi or ready 2 type 
messages to all. All these previous epochs make sure 
that all the correct nodes eventually arrive at Epoch 3 
and outputs a direction which satisfies theorem [2] The 
formal proofs are given in the appendix. 


B. Asynchronous agreement 

Now we give our main protocol A-Agree which 
uses AR-Cast as a subroutine and allows the correct nodes 
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in an asynchronous network to agree on a reference frame. 


Protocol 3: A-Agree 


1 

2 

3 

4 

5 

6 


input : Vi, Pi inputs direction Ui 
output : Vi, Pi outputs direction Vi 
Epoch 0: (Player Pi) 

Create a direction array Wi of size n. 

Vj, initialize Wi\j] 4— _L. 

Run AR-Cast(ui). 

// everyone broadcasts their local input 
Store received direction from Pj in Wi[j\. 

After receiving (3f + 1) such directions Goto 
Epoch 1. However, still continue the incomplete 
AR-Casts in parallel. 


1 

2 

3 

4 

5 


Epoch 1: (Player Pi) 

Create a bit string at of size n. 
for j 4— 1 to n do 
if Wi\j\ t^_L then 
|_ Assign di[j] <- 1. 


6 

7 


else 

|_ Assign a,i[f\ 4- 0. 


there are (3t + 1) correct nodes they will eventually ar¬ 
rive at Epoch 1. In this step all the correct nodes create 
a bit string of length n where j’th bit represents if the 
j’th AR-Cast has been completed successfully in Epoch 0. 
Then all the nodes send this bit string to all by playing 
Asynchronous-IC. After this they enter Epoch 2. In this 
Epoch every node has the same set of bit strings. They 
now look for the lowest inter fc such that at least (t + 1) 
bit strings have a 1 in the fc’th index of the string. If 
they have completed that fc’th AR-Cast they output their 
direction received from that broadcast. If the fc’th AR- 
Cast is not complete for a node, it waits until it completes 
and then output. The election of fc ensures that at least 
one correct node has completed the fc’th AR-Cast so by 
Consistency of asynchronous reference frame broadcast 
all the correct nodes will eventually complete the fc’th 
AR-Cast. This ensures that the A-Agree eventually com¬ 
pletes. There is no conditional loop in this protocol and 
all the subroutines run in constant expected time. So, the 
A-Agree is also a constant expected time protocol. The 
formal proofs are given in the appendix. 


// di records which A-Casts are completed so far 
by Pi 

8 Run Asynchronous-IC(ai). 

// This step reports to all which A-Casts are 
successfully received by Pi 

9 Store the output of Asynchronous-IC in vector bi such 
that, element bi[j] is received from Pj. 

// After this step every correct nodes know 

which A-Casts are reported to be complete by 
which node 

10 Wait until Asynchronous-IC completes Then 

11 Goto Epoch 2 


1 

2 


3 

4 

5 

6 


Epoch 2: (Player Pi) 

Let ki be the index of a column which has at least 
(t + 1) Is in it. So that, for any other index l of 
column with (t+1) Is fc < fc // After 
completion of Asynchronous-IC each row of bi 
is a bit string of length n. That is bi 
is essentially an n X n bit matrix. 

Wait until the A-Cast initiated, by Pk i completes 
Then 

Assign v 4— Wi [ki]. 

Abort all incomplete A-Casts that are running 
since Epoch 0. 

Output v. 


IV. CONCLUSION 

In this work we have presented the first asynchronous 
reference frame agreement protocol. The synchronous 
protocol for spatial reference frame agreement presented 
in [20] can tolerate up to t < n/3 faulty nodes. Whereas, 
the asynchronous protocol we have presented tolerates 
only t < n/4 faulty nodes. Even though we pay this 
extra price in fault tolerance, an asynchronous protocol 
is a fully general reference frame agreement protocol. If 
message delays are fixed, our protocol can also be used 
to synchronise clocks |3l| . which is an important prob¬ 
lem in its own right. There are classical protocols for 
asynchronous agreement on bits which achieve t < n /3 
in constant expected time, it remains open to see if this 
bound can be achieved by reference frame agreement pro¬ 
tocols for a quantum network. 


Acknowledgments 


In Epoch 0 of protocol [3} A-Agree each of the nodes 
Pi proposes a direction Ui ,which represents their local 
frame. They broadcast this direction using AR-Cast. All 
the correct nodes wait for at least (3t + 1) such broad¬ 
casts to be complete. Then they enter Epoch 1. Since, 


We thank Lo'ick Magnin and Michael Ben-Or (via Loick 
Magnin) for helpful pointers, and David Elkouss for com¬ 
ments on an earlier version of this article. This work was 
supported by NRF CRP Grant “Space based QKD” and 
STW, QuTech. Stephanie Wehner is also supported by 
NWO VIDI Grant. 


[1] H. J. Kimble, Nature 453, 1023 (2008). 

[2] M. Aspelmeyer, T. Jennewein, M. Pfennigbauer, 


W. Leeb, and A. Zeilinger, IEEE J. Sel. Topics Quan¬ 
tum Electron. 9, 1541 (2003). 











7 


[3] C. Bonato, A. Tomaello, V. D. Deppo, G. Naletto, and [31] I. L. Chuang, Phys. Rev. Lett. 85, 2006 (2000). 
P. Villoresi, New J. Phys. 11, 045017 (2009). 

[4] C.-Z. Peng, T. Yang, X.-H. Bao, J. Zhang, X.-M. Jin, 

F.-Y. Feng, B. Yang, J. Yang, J. Yin, Q. Zhang, et al., 

Phys. Rev. Lett. 94, 150501 (2005). 

[5] C. Bonato, M. Aspelmeyer, T. Jennewein, C. Pernechele, 

P. Villoresi, and A. Zeilinger, Opt. Express 14, 10050 
(2006). 

[6] J. M. P. Armengol, B. Furch, C. J. de Matos, O. Min¬ 
ster, L. Cacciapuoti, M. Pfennigbauer, M. Aspelmeyer, 

T. Jennewein, R. Ursin, T. Schinitt-Manderbach, et al., 

Acta Astronaut. 63, 165 (2008). 

[7] M. Sasaki, M. Fujiwara, H. Ishizuka, W. Klaus, K. Wakui, 

M. Takeoka, S. Miki, T. Yamashita, Z. Wang, A. Tanaka, 
et al., Opt. Express 19, 10387 (2011). 

[8] J. I. Cirac, P. Zoller, H. J. Kimble, and H. Mabuchi, Phys. 

Rev. Lett. 78, 3221 (1997). 

[9] C. Elliott, New J. Phys. 4, 46 (2002). 

[10] R. Beals, S. Brierley, O. Gray, A. W. Harrow, S. Kutin, 

N. Linden, D. Shepherd, and M. Stather, Proc. R. Soc. 

A 469 (2013). 

[11] Y. Li and S. C. Benjamin, New Journal of Physics 14, 

093008 (2012), 1204.0443. 

[12] S. Barz, E. Kashefi, A. Broadbent, J. F. Fitzsimons, 

A. Zeilinger, and P. Walther, Science 335, 303 (2012). 

[13] S. Massar and S. Popescu, Phys. Rev. Lett. 74, 1259 
(1995). 

[14] A. Peres and P. F. Scudo, Phys. Rev. Lett. 87, 167901 

( 2001 ). 

[15] E. Bagan, M. Baig, R. Munoz-Tapia, and A. Rodriguez, 

Phys. Rev. A 69, 010304 (2004). 

[16] G. Chiribella and G. M. D’Ariano, J. Math. Phys. 45, 

4435 (2004). 

[17] E. Bagan and R. Munoz-Tapia, Int. J. Quantum Inf. 4, 

5 (2006). 

[18] V. Giovannetti, S. Lloyd, and L. Maccone, Phys. Rev. 

Lett. 96, 010401 (2006). 

[19] M. Skotiniotis and G. Gour, New J. Phys. 14, 073022 

( 2012 ). 

[20] T. Islam, L. Magnin, B. Sorg, and S. Wehner, New J. 

Phys. 16, 063040 (2014). 

[21] S. D. Bartlett, T. Rudolph, and R. W. Spekkens, Rev. 

Mod. Phys. 79, 555 (2007). 

[22] P. Shadbolt, T. Vertesi, Y.-C. Liang, C. Branciard, 

N. Brunner, and J. L. O’Brien, Scientific reports 2 

( 2012 ). 

[23] J. B. Brask, R. Chaves, and N. Brunner, Physical Review 
A 88, 012111 (2013). 

[24] V. D’Ambrosio, E. Nagali, S. P. Walborn, L. Aolita, 

S. Slussarenko, L. Marrucci, and F. Sciarrino, Nature 
communications 3, 961 (2012). 

[25] P. Komar, E. M. Kessler, M. Bishof, L. Jiang, A. S. 

Sorensen, J. Ye, and M. D. Lukin, Nat Phys 10, 582 
(2014). 

[26] A. Peres and P. F. Scudo, Phys. Rev. Lett. 86, 4160 

( 2001 ). 

[27] L. Lamport, R. Shostak, and M. Pease, ACM T. Prog. 

Lang. Sys. 4, 382 (1982). 

[28] M. Pease, R. Shostak, and L. Lamport, J. ACM 27, 228 
(1980). 

[29] M. Ben-Or and R. El-Yaniv, DISTRIB COMPUT 16, 

249 (2003). 

[30] R. Canetti and T. Rabin, in Proc. ACM STOC’93 (ACM, 

1993), pp. 42-51, ISBN 0-89791-591-7. 


V. APPENDIX 


We do this by contradiction: let us assume that, 


A. Asynchronous reference frame broadcast 

To prove correctness of our AR-Cast we have to prove 
theorem [ 2 ] as repeated here. 

Theorem 2. In a complete network of n nodes that are 
pairwise connected by public authenticated quantum and 
classical channels, if a bipartite 5-estimate direction pro¬ 
tocol that uses m qubits to achieve success probability 
Qsucc > 1 — e~ n ( mS ) is used, then protocol AR-Cast is 
a (42 5, 145) -asynchronous reference frame broadcast pro¬ 
tocol, with success probability at least 1 — e~ n ^ mS _los ") 
that can tolerate up to t < n/4 faulty nodes. 

For this we observe several properties of Protocol [2] in 
the following lemmas. The first observation is that if two 
different correct nodes send [readyi] type messages then 
the direction they send are close to each other with high 
probability. 

Lemma 1. For t < n/ 4, 5 > 0, g succ > 0 , if two cor¬ 
rect nodes Pi and Pj send ([readyi],u) and ([readyi],v) 
respectively, then d{u , v) < 105 with probability at least 

n+n 2 
^succ * 

Proof. In step [4] of Epoch 2 when a [readyi] message is 
generated there are at most n init messages originated 
from the sender and at most n 2 echo messages generated 
by the other nodes. So, with probability at least 
all the transmissions which are among correct nodes are 
successful. Conditioning on this, we prove, 




Bi n Bj = 0. 


(7) 

I Ai 

l> 

n — t 


(8) 

=+ 

| Ai 

— Bi \ + \Bi\ > 

n — t, 

(9) 

=+ ■ 

t + 

\Bi\ >n — t, 


(10) 

=+ 

\Bi\ 

> n — 2t, 


(11) 

=+ 

m 

> n — 2(n/4) 

= n/2. 

(12) 


Here, inequality (flOl) holds because at most t of the 
nodes are faulty. And inequality (fT^l) holds because t < 
nj 4. 

Now, 

|Ai UAj\ = \{Ai - Bi) U (Aj - Bj) U B t U Bj \, 


> \(Aj - Bj)\ + \Bi\ + \Bj\ , (13) 

= \Aj \ + \Bi \ , (14) 

> (n — t) + n/2, (15) 

> n — n/A + n/2 = 5n/A (16) 


Here, inequality (fl3l) uses inequality 0, inequality (fl5l) 
follows from the definition from the size of Aj and inequal¬ 
ity m- And inequality (TTO1) follows because, t < n/A. 
However, this is a contradiction, because there are only 
n nodes in the network. Therefore, we have, 

BtnBj^tl). (17) 


d(u, v ) < 105. (1) 

We show this in two steps. First, we show that there 
exists a common correct node Pk in P(Cj 4 < 5 ([echo], u)) and 
P(C' 45 ([echo], w)), where Cf^Qecho], u) and Cj s ([echo], v) 
are the cluster of echo type directions received by Pi and 
Pj respectively . Then using the triangle inequality with 
the fact that the echo vector from Pk must be close to 
both of the cluster centers u and v, we derive inequal¬ 
ity 0 . 

Now, for the first step, let us denote Ai and Aj to be 
the set of nodes from which the vectors respectively in 
C 45 ([echo], u) and C 4 < 5 ([echo], v) have originated. And Bi 
and Bj to be the correct nodes in Ai and Aj respectively. 
Formally, 


So, there exists a common correct node Pk G Bi n Bj 
in P(C 45 ([echo], u)) and P(C 4l5 ( [echo],u)). Since Pk is 
correct, it must have sent the same echo type message 
to both Pi and Pj. So, using the triangle inequality we 
have, 

d(wi[k\,Wj[k]) < d(wi[k],u k ) + d(u k ,Wj[k}), (18) 
<5 + 5 = 25. (19) 

Now inequality 0 follows because, 

d(u,v) < d(u,Wi[k]) + d(wi[k\,Wj[k]) + d(wj[k\,v), 

( 20 ) 

< 45 + d(wi[k],Wj[k}) + 45, (21) 

< 45 + 25 + 45 = 105. (22) 


Ai = P(Cf s ([echo], u)), ( 2 ) 

A o = P{Cf ([echo], v)), (3) 

Bi = {Pi : Pi € Ai and Pi is correct.}, (4) 

Bj = {Pi : Pi € Aj and Pi is correct.}. (5) 

Note that at this step \A t \ > n — t and \Aj\ > n — t. 
We want to show that, 

B z n B 3 ± 0. (6) 


Here, inequality (ED. follows from the definitions of 
C 45 ([echo], u) and C 4 ,s ([echo], v) and inequality (P 221 ) fol¬ 
lows from inequality m- □ 

In lemma [T] we have shown the relation between two 
[readyi] type directions from two different correct nodes. 
Now we show that if a correct node sends a [readyi] and 
another correct node sends a [ready 2 ] type message then 
the directions they send are close with high probability. 
Both of these proofs use similar techniques. 
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Lemma 2. For t < n/4, 5 > 0,q succ > 0, if two cor¬ 
rect nodes Pi and Pj send ([readyi],u) and (fready 2 ],v) 
accordingly, then d{u, v ) < 105 with probability at least 

„n+2n 2 

*isucc 

Proof. When a [ready 2 ] message is generated there are 
at most n init, n 2 echo and in total n 2 [readyi] or 
[ready 2 ] messages generated in the protocol. With prob¬ 
ability at least all the transmissions which are 

among correct nodes are successful. Conditioning on this, 
we show that, 

d{u, v ) < 105. (23) 

We do this in two steps, first we show that there 
is a common correct node Pk in P(C' J 4l5 ([echo], m)) and 
P{Cf s ([echo], v)). Then using the triangle inequality 
with the fact that both of the cluster centers u and v 
must be close to the echo direction sent from Pk we prove 
the inequality (1551) . 

Now, for the first step, let us denote Ai and Aj to be 
the set of nodes from which the vectors respectively in 
(C 4,s ([echo], u) and C 4,5 ([echo], v) have originated. And 
Bi and Bj to be the correct nodes in Ai and Aj respec¬ 
tively. Formally, 


A i= P(Ct 5 ([echo],u)), (24) 

Aj=P(Cf s ([e cho],t>)), (25) 

Bi = {Pi : Pi £ Ai and P; is correct.}, (26) 

Bj = {Pi : Pi £ Aj and P/ is correct.}. (27) 

Note that here \Ai\ >n — t and |A,-| > n — 2t. We want 
to show that, 

BiPBj^ty. (28) 

We do this by contradiction: let us assume that, 

B z n B 0 = 0. (29) 

Note that, 

I Ai| > n — t (30) 

=> \Ai - Bi\ + \Bi\ > n - t, (31) 

=> t + |Pi| >n — t, (32) 

=> |Pi| > n — 2t, (33) 

=+ |Pi| >n- 2{n/4) = n/2. (34) 


Here, inequality (l32l) holds because at most t of the 
nodes are faulty. And inequality (l34l) holds because t < 
n/4. 

Now, 

|Aj U Aj| = |(Ai - Bi) U {Aj - B 0 ) U Bi U Bj \, 


>\{Aj-Bj)\ + \Bi\ + \Bj\, (35) 

= |Aj| + |Pi|, (36) 

>{n-2t)+n/2, (37) 

> n — n/2 + n/2 = n (38) 


Here, inequality (1371) follows from the definition of Aj 
and inequality (l34l) . And inequality (l38l) follows because, 
t < n/4. However, this is a contradiction, because there 
are only n nodes in the network. Therefore, we have, 

Bi n Bj ^ 0. (39) 

So, there exists a common correct node Pk in 
P(C' 4 l 5 ([ ec ho], n)) and P{Cj s { [echo], v)). As Pk is correct, 
it must have sent the same echo type message to both Pi 
and Pj. So, using the triangle inequality we have, 

d(wi[k],Wj[k]) < d(wi[k],Uk) + d(uk,Wj[k]), (40) 
<5 + 5 = 25. (41) 

Now inequality (l23l) follows because, 

d{u,v) < d{u,Wi[k\) + d{wi[k],Wj[k]) + d(wj[k],v), 

(42) 

< 45 + d{wi[k], Wj[k]) + 45, (43) 

< 45 + 25 + 45 = 105. (44) 

Here, inequality (1151) follows from the definitions of 
Cj 4 , 5 ([echo], u) and C 4 i ([echo], v) and inequality (l44l) fol¬ 
lows from inequality (1411) . 

□ 

Now we show that all the correct nodes cannot send 
only [ready 2 ] type messages. That is, if there exists a 
[ready 2 ] message sent from a correct node, then there 
must pre-exist a [readyi] message sent from another cor¬ 
rect node. 

Lemma 3. For t < n/4, 5 > 0, g succ >0, if a cor¬ 
rect node Pj sends ([ready 2 ],v), then with probability at 
least (?" u "} 2rl , there exists a correct node Pi which has sent 
([readyi], u) ■ 

Proof. When a [ready 2 ] message is generated there 
are at most n [init], n 2 [echo] and in total n 2 
[readyi] or [ready 2 ] messages generated in the proto¬ 
col. With probability at least (j++ 2 " all the trans¬ 
missions which are among correct nodes are successful. 
In this case, just before making the decision to send 
a (]ready 2 ],u) message node Pj must have received at 
least (t+ 1 ) [readyi] or [ready 2 ] messages from nodes 
in P(C , l 10 , 5 ([readyi,ready 2 ]u c )). Of these, at least one 
node—let’s call it Pk —is correct. If Pk has also sent a 
[ready 2 ] type message, we can find another correct node 
in its P(C/ 05 ([readyi,ready 2 ]u c )) an( l so on. This way, 
eventually we will find a correct node who has sent a 
[readyi] type message. 

To see this, let us define a directed graph G(V, E) with 
vertex set V = {Pi : Pi is correct}, and 

E = {{Pk, Pi) ■ Pk has sent ready 2 

after receiving readyi or rea dy 2 from Pj}. (45) 

One can convince oneself that G is a directed acyclic 
graph because any cycle in the graph would violate the 
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cause and effect relation of the edge directions. Now if 
we look at the connected component of this graph con¬ 
taining Pj there must exist a node Pi in this component 
with no outgoing edges. Because V only contains correct 
nodes. This implies Pi is a correct node which has sent 
a [readyi] type message ([readyi],u). This completes the 
proof. □ 

Now the only thing that remains is to show that two 
[ready 2 ] type directions sent from two correct nodes are 
close with high probability. 

Lemma 4. For t < n/4, 5 > 0, g succ > 0, if two nodes 
Pi and Pj sends ([ready 2 ],u) and ([ready 2 ],v) respectively, 
then d(u , v ) < 205 with probability at least 2n ■ 

Proof. When a [ready 2 ] message is generated there are 
at most n [init], n 2 [echo] and in total n 2 [readyi] or 

[ready 2 ] messages generated in the protocol. With prob¬ 

ability at least g^([" all °f these transmissions which 
are between correct nodes are successful. Conditioning 
on this, we show that, if correct Pi sends ([ready 2 ],w) 
then from Lemma [3] there exists a correct node Pk which 
has sent ([readyi], w)- From Lemma [2] 

d(u,w) < 10(5, (46) 

and 

d(v,‘w) < 105. (47) 

Using the triangle inequality with these we get, 
d(u, v) < d{u , w) + d(w, v) < 105 + 105 = 205. (48) 

□ 

Now we are ready to prove that our protocol [2] satisfies 
the first termination condition of definition [3j 

Lemma 5 (Termination 1). For t < n/ 4, 5 > 0, g succ > 
0, if the sender Pk is correct then the protocol^ AR-Cast 
eventually terminates with probability at least g™^™ . 

Proof. There are at most n [init] messages, n 2 [echo] 
messages and n 2 [readyi] or [ready 2 ] type messages ex¬ 
changed in the protocol. With probability at least 
Is ucc™ all °f these transmissions which are between cor¬ 
rect nodes are successful. In this case, if the sender 
is correct all the correct nodes eventually receive [init] 
messages that are at most 25 apart from each other 
and send an echo message. So, all the received [echo] 
messages are at most 35 apart from the received direc¬ 
tion in the [init] message of any correct node. Any 
node that has sent a [readyi] type message will go to 
epoch 3. The faulty nodes cannot stop the [init] and 
[echo] messages from correct nodes but they can manip¬ 
ulate the delays, so that some of the correct nodes send 
[ready 2 ] type messages. After sending the [ready 2 ] these 
correct nodes will eventually arrive at Epoch 3. From 
lemma [I] and lemma [5] we can see that for any correct 


Pi all the received [readyi] and [ready 2 ] directions will 
be in C} &6 ([readyi,ready 2 ], v c ). And because there are 
(n — t ) of them originating from the correct nodes the 
protocol[2] AR-Cast will eventually terminate. Note that, 
if the sender is faulty, the definition of (??, C) -reference 
frame broadcast protocol (Derinition [3]) do not require 
any termination. □ 

Now we show that if one correct node outputs a direc¬ 
tion, then all the correct nodes eventually output direc¬ 
tions that are close to each other. 

Lemma 6 (Consistency). For t < n/ 4, 5 > 0, g SUC c ^ 0? 
in protocol AR-cast, if a correct node Pk outputs Vk then 
all pair of correct nodes Pi,Pj eventually output Vi,Vj 
respectively such that, d(vi,Vj) < 425 with probability at 
least q™+ c f . 

Proof. When a [ready 2 ] message is generated there are 
at most n init, n 2 echo and in total n 2 [readyi] or 
[ready 2 ] messages generated in the protocol. With prob¬ 
ability at least g^c™ all of these transmissions which 
are between correct nodes are successful. In this case, we 
prove, 

d{vi,Vj) < 425, (49) 

by showing that the successful completion of Pk implies 
there are enough echo, [readyi] and [ready 2 ] type mes¬ 
sages generated by correct nodes so that all the other 
correct nodes eventually receive them and successfully 
terminate and each pair of their outputs satisfies inequal¬ 
ity dm) . 

Now, if a correct node Pk outputs Vk then this implies it 
has received at least (n — t) [readyi] or [ready 2 ] messages 
from nodes in P(C'^ 05 ([readyi,ready 2 ],Ufc)), of which at 
least (n — 2 1) are correct. Messages from these correct 
nodes eventually reach all the other correct nodes. Also, 
from lemma[3]there exists a correct node which has sent a 
[readyi] message which implies all the correct nodes even¬ 
tually receive at least (n — 2 1) echo messages. That is, all 
the correct nodes waiting in Epoch 1 or Epoch 2 will sat¬ 
isfy the condition of sending a [ready 2 ] message and go to 
Epoch 3. Any correct node Pj, Pj waiting in Epoch 3 will 
eventually receive all the [readyi] or [ready 2 ] messages 
sent from correct nodes in P(C 20S ([readyi,ready 2 ], rg)) 
and P(C? 05 ([readyi,ready 2 ], Vj)) accordingly, and output 
V{, Vj accordingly. 

Now we show that P(Cf 0 < 5 ([readyi,ready 2 ],Uj)) and 
P(C? 0 ' 5 ([readyi,ready 2 ],Uj)) have at least one common 
correct node, which implies the cluster centers are close. 

To see this note that each of these clusters have at least 
(n — 2t) > n — 2(n/4) = n/2 correct nodes. That is more 
than n correct nodes in total. However there are total 
n nodes in the networks. This implies at least some of 
the correct nodes are common in both clusters. Let P; 
be such a node. 
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Now using triangular inequality we have, 

d(vi,Vj) < d(vi,Vi[l ]) + d(vi[l],vi) 

+ d(vi,Vj[l ]) + d(vj[l],Vj), (50) 

< 205 + 6 + 5 + 205 = 425. (51) 

Here inequality (f5TT) follows using lemma |1J □ 

Now the second termination condition. 

Lemma 7 (Termination 2). For t < n/4, 5 > 0, g succ > 
0 , if a correct node Pi completes the protocol then all 
the correct nodes complete the protocol with probability 
at least g s n + 2 ” 2 . 

Proof. This lemma is a corollary of lemma [ 6 ] Because 
lemma [ 6 ] ensures completion with probability at least 

„n+ 2 n 2 

^SUCC 

□ 

Now we are ready to prove that our protocol satisfies 
the correctness condition of definition [3] 

Lemma 8 (Correctness). For t < n/ 4, S > 0,q succ > 0, 
if a correct sender P s sends (init,u) and a correct node 
Pi outputs Vi then d{u,Vi) < 145 with probability • 

Proof. There are at most n init messages, n 2 echo mes¬ 
sages and n 2 [readyi] or [ready 2 ] type messages ex¬ 
changed in the protocol. With probability at least qs£ 2n 
all of these transmissions which are between correct 
nodes are successful. 

In this case we prove the lemma in three steps. First, 
we show that all the [readyi] type directions sent from 
correct nodes are close to u. Secondly, we show that all 
the [ready 2 ] type directions sent from the correct nodes 
are close to u. And finally, from these we conclude the 
proof. 

For the first step, let us assume that correct node Pi 
has sent a ([readyi], vf) message in Epoch 2. So, it has 
received at least (n — t ) echo type messages, of which at 
least (n — 2 1) are from correct nodes. Let’s assume for 
some correct node P 3 u>i[j] £ Cf s (Vi). Since Pj is correct, 
using the triangle inequality, we have, 

d{u,Wi[j]) < d(u,Uj) + d(uj,Wi[j]), (52) 

< 5 + 5 = 26. (53) 

The diameter of the cluster Cf s (vi) is 45. So, we have, 
d(vi,Wi\j]) < 25. Using this and (l53l) with the triangle 
inequality, we have, 

d(u,Vi) < d(u,Wi[j ]) + d(wi\j],Vi), (54) 

< 25 + 25 = 45. (55) 

Now, for the second step, let us assume that a correct 
node Pi has sent a ([ready 2 ], v{) message from Epoch 1 
or Epoch 2. So, vi is a cluster center of at least (n — 2 1) 


echo type messages. Of which at least (n — 3t) are correct. 
So, a similar reasoning to the previous step shows, 


d(u,vi) < 45. (56) 

Finally, since the sender is correct from lemma [5] we 
know, all the correct nodes eventually enter Epoch 3 and 
successfully complete the epoch. 

Let us assume a correct node Pi has received 
a cluster of [readyi] or [ready 2 ] type directions 
C 20S ([readyi,ready 2 ], v c ) of size at least [n — t). So, 
there is a correct node Pk for which Vi[k] £ 
C 20S ([readyi,ready 2 ],u c )- Here, C 20S ([readyi,ready 2 ], v c ) 
is a cluster of diameter 205. So, we have d(vi [k],v c ) < 105. 
Using the triangle inequality with this, and (l55l) and (l5()l) . 
we have, 


d(u,v c ) < d(u,Wi[k ]) + d(wi[k\, v c ), (57) 
< 45 + 105 = 145. (58) 

This concludes the proof. 

□ 

Now we give an auxiliary lemma that shows how the 
probability of success scales with the number of nodes 
and the success probability of the 5-estimate direction 
protocol. 

Lemma 9. If a two-node direction estimation protocol 
is used that transmits m qubits to 5 approximate a direc¬ 
tion which succeeds with probability q succ > (1 — e~ f2 ( mi5 )) 
then with probability at least 2n > 1 — e~ n ^ mS -lo s ra ), 
all the direction transmissions of init, echo, [readyi] and 
[ready 2 ] type messages are successful. 

Proof. There are at most n init messages, n 2 echo mes¬ 
sages and n 2 [readyi] or [ready 2 ] type messages ex¬ 
changed in the protocol. With probability at least q£+. 2n 
all of these transmissions which are between correct 
nodes are successful. Now, 


> (q _ g -f!(m5 2 )jn+2n 2 

(59) 

> l-(n + 2 n 2 )e" n(m52) , 

(60) 

> l _ e ~Cl(mS 2 -logn) 

(61) 


Here inequality (1601) follows using Bernoulli’s inequal¬ 
ity, which is, (1 + x) r > 1 + rx for all real x > — 1 and 
integer r > 2 . 

□ 

We see that, theorem [ 2 ] follows from lemma [5j [HI 0 [H] 
and E3 
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B. Asynchronous Agreement 

So far we have presented an asynchronous broadcast 
protocol where a designated sender initiates the protocol 
with a direction. One major weakness of the protocol is 
that, if the sender is faulty then the protocol might never 
terminate, because in this case the correct nodes cannot 
decide whether the sender is faulty and not sending the 
[init] message, or correct but very slow. On the other 
hand, in an asynchronous reference frame agreement pro¬ 
tocol the main goal is to allow the correct nodes to agree 
on some direction despite the presence of—up to a cer¬ 
tain number of—unidentified faulty nodes in the network. 
This requires extra caution to make sure that the proto¬ 
col eventually terminates. We show that our protocol [3] 
A-Agree successfully solves this problem by proving theo¬ 
rem [H We repeat the theorem here. 

Theorem 1 . In a complete network of n nodes that are 
pairwise connected by public authenticated classical and 
quantum channels, if a bipartite S-estimate direction pro¬ 
tocol that uses m qubits to achieve success probability 
Qsucc > 1 — e _n ( m<5 - 1 is used, then protocol A-Agree is 
a 42S-asynchronous reference frame agreement protocol 
with success probability at least 1 — that 

can tolerate up to t < n /4 faulty nodes. 

There are three epochs in protocol^ Any correct node 
that successfully terminates must start at Epoch 0 and 
terminate at Epoch 3. At each Epoch the nodes inside 
it, and all the messages transmitted and received by the 
node while in that Epoch satisfies some invariance prop¬ 
erties. We describe and prove these properties in the 
following lemmas. We first show that a correct node will 
eventually enter Epoch 1. 

Lemma 10. Fort < n/ 4, all the correct nodes eventually 
enter Epoch 1 of A-Agreement with probability at least 

„n 2 +2n 3 \ i p — Q(mS 2 — log n) 

f/succ — 1 e 

Proof. Each of the n nodes has initiated an AR-Cast in 
Epoch 0. Each of the AR-Casts has a success probability 
at least g" u + c 2 ” 2 . So, with probability at least g " u 2 + 2 " 3 all 
the AR-Casts from correct senders are successful. From 
Lemma IH1 this is at least 1 — e - s ’ 2 ( m < 52 - 1 °g™). 

As t, < n/4, there are at least (3 1 + 1) correct nodes 
who initiates AR-Cast as sender. According to Theorem[2] 
these (3t + 1) AR-Casts will eventually terminate. So, 
every correct receiver will eventually receive at least (3f + 
1) directions and go to Epoch 1 with probability at least 

n 2 +2n 3 □ 

^SUCC 1 — 1 

Each of the correct nodes stores the output of the 
Asynchronous-IC protocol in an array bi. Here bi can be 
seen as an n x n matrix of bits where row j is received 
from node j. We can observe the following property of 
this matrix. 

Lemma 11. For t < n/4 and correct node Pi, after 
instruction [P| of Epoch 1 of A-Agreement, there exists a 
column in bi with at least (t + 1 ) Is in it. 


Proof. We show this by a counting argument. Note that a 
correct node arrives at Epoch 1 only after it have received 
at least (3f +1) directions from other players. As a result 
after step [7] of Epoch 1 ai contains at least (3 1 + 1) l’s. 
These afs become the rows of bi after step [9] There are 
at most t faulty nodes. So, at least (3f +1) rows of bi are 
originated from correct nodes. Each of these rows must 
contain at least (3 1 + 1) l’s. So bi has at least (3 1 + l) 2 
Is. 

However, if no column had at least (t+1) Is, then there 
would be at most (4 1 + 1) x t Is in b t . This contradicts 
the fact that bi has at least (3 1 + l) 2 Is. So, there must 
exist a column with at least (t + 1) Is in it. □ 

We show that all the correct nodes select the same 
column which has at least t + 1 Is in it. 

Lemma 12. After instruction [H of Epoch 2 of A- 
Agreement, if correct node Pi has ki and correct node 
Pj has kj, then ki = kj. 

Proof. After completion of protocol Asynchronous-IC in 
Epoch 1, all the correct nodes compute the same output 
vector. That is, bi = bj for all correct Pi and Pj. Also, 
from lemma [TT] we know there exists a column in bi with 
at least (t + 1) Is. So, in Epoch 2 step [5] when correct 
node Pi and Pj selects ki and kj to be the chronologically 
smallest column index that has at least ( t. + 1) Is. They 
select the same column, i.e., ki = kj. □ 

Now that every correct node Pi agrees on a column ki 
of bi, we observe that. 

Lemma 13. If a correct node Pi selects ki in instruc¬ 
tion [H of Epoch 2, then the AR-Cast initiated by P^ in 
Epoch 0 eventually completes successfully. 

Proof. We show this by showing that at least one correct 
node has completed the AR-Cast initiated by P^. Then 
the lemma follows from the termination condition of AR- 
Cast. 

Each row bi\j] represents PCs knowledge of which AR- 
Casts are successfully received by Pj. For example, if 
bj [j] [/] = 1 , then it means node Pj has reported to Pi 
that it has completed the AR-Cast initiated by node Pi 
in Epoch 0. If there are at least (t + 1) Is in the kith 
column of bi, it means that there are (f + 1) nodes who 
report that they have received the AR-Cast initiated by 
node P; Si in Epoch 0. At least one of these reports is 
from a correct node. So, from the termination condition 
of AR-Cast (Lemma [6]) all the correct nodes eventually 
successfully complete the AR-Cast by P&. □ 

Now we are ready to prove theorem |l} 

Proof. There are at most n AR-Casts initiated in Epoch 0 
of which (n — t ) are by correct nodes. From lemma [9] 
each of these succeeds with probability g"+ 2 " > 1 — 
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e °( m ' 52 lo s ra ). So all the correct AR-Casts succeed with, This with (1641) and (l65l) gives, 


n 2 +2n 3 \ /i — Q(mS 2 — log n)\n 

Vsucc — V 1 e / ? 

> l _ e ~fl(mS 2 -log n) 


(62) 

(63) 


Here inequality (1631) follows from Bernoulli’s inequality. 
Conditioned on this we show, 

a. Correctness. To prove consistency we show that 
if a correct node Pi outputs Vi and a correct node Pj 
outputs Vj then d(vi,Vj ) < 42 S. From step 0] of Epoch 2 
of A-Agree we see that, 


Vi=Wi[ki], (64) 

Vj=w j [k j ]. (65) 

From lemma [HI we know that for t < n/ 4, 

d(wi[ki],Wj[kj}) < 42<5. (66) 


d(vi, Vj) < 42S. (67) 

b. Termination To prove termination we have to 
show that every correct node Pi terminates with an out¬ 
put direction ty. 

To prove this we show that Pi eventually completes 
all the Epochs of A-Agree. From Lemma ITOl we see that 
Pi must enter Epoch 1 from Epoch 0. All the steps in 
Epoch 1 are of constant expected time. So, a correct node 
will eventually complete them and go to Epoch 2. Only 
in step [3] of Epoch 2 Pj waits for completion of AR-Cast 
from Pj. t . However, from Lemma M we know that this 
AR-Cast eventually successfully completes. All the other 
incomplete AR-Casts are then aborted at Step [5] and the 
protocol terminates with output Vj. 

□ 


